OIDC overview

The pasby OIDC API lets third-party apps verify users and receive consented identity attributes through a short, OAuth-like flow:

1. Your backend starts a session (kipindi / login)
2. The user identifies on pasby’s hosted UI (national.eid.pasby.africa)
3. Your backend exchanges the handshake for an access token (kupeana / shake)
4. Your backend fetches claims (resource)

Base URL: https://oauth.pasby.africa/api/v1/oidc/

Use OIDC for browser-first products. Use the public API v2 for signing, documents, wildcard QR, and mobile-native flows.

Official SDKs

Prefer an SDK over raw HTTP — they handle PKCE, headers, encryption, and callback wiring.

Start here: OIDC quickstart

Navigation labels

API reference

• Start session
• Exchange token
• Get user claims
• PKCE